Welcome to ISAserver.org

DHCP requests not going to DHCP server

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 Firewall] >> Access Policies >> DHCP requests not going to DHCP server

Page: [1]

Message

<< Older Topic Newer Topic >>

DHCP requests not going to DHCP server - 21.Feb.2006 1:30:39 PM

Kumaraseem

Posts: 3
Joined: 21.Feb.2006
Status: offline

Scenario
A server - Windows 2003 Ent. Edition installed
Roles: Domain Controller, DHCP server, DNS server, & ISA 2004 also installed

Has 2 Lan Cards
External (10. range) connects with internet
Internal (192.168. range) connects with internal machines

Am trying to make another machine get IP address from this DHCP server but The requests are not reaching the DHCp server component because the ISA firewall is blocking the requests

Have put in rules also as stated on the microsoft's website
http://www.microsoft.com/technet/prodtechnol/isa/2004/plan/isaondhcpserver.mspx

In DHCP scope i have asked it to give IP from 192.168. range

Where am i going wrong as the IP is not getting assigned.
I sniffed the data packets and only requests from 0.0.0.0 to 255.255.255.255 are on the wire

Thanks

Post #: 1

Featured Links*

RE: DHCP requests not going to DHCP server - 21.Feb.2006 7:33:57 PM

elmajdal

Posts: 6022
Joined: 16.Sep.2004
From: Lebanese in Kuwait
Status: offline

hi Kumaraseem,

u installed ISA on a Domain Controller !! so by default when isa installed , it blocks all communication through it.

thats why you clients are not being able to communicate with you DC and DHCP server.

create a new rule:

Action : allow rule
Protocols : for all protocols
from : LocalHost AND internal
to : LocalHost AND internal
Condition: All users

put this rule on top of other rules.

HTH

(in reply to Kumaraseem)

Post #: 2

RE: DHCP requests not going to DHCP server - 22.Feb.2006 6:59:30 AM

Kumaraseem

Posts: 3
Joined: 21.Feb.2006
Status: offline

If i put the rule to allow all protocols from internal to localhost then this will reduce the security, I dont think this to be a good practice.
And i have put in DHCP request & Reply allow rule in the list

Also i checked my Event viewer and regarding DHCP an error is there
"The DHCP service failed to register with Service Controller. The following error occurred:
The operation completed successfully. "

This error comes when the system is started.
I check on MS KB but nothing is listed there.

(in reply to elmajdal)

Post #: 3

RE: DHCP requests not going to DHCP server - 22.Feb.2006 12:15:40 PM

Kumaraseem

Posts: 3
Joined: 21.Feb.2006
Status: offline

After removing the firewall the things are working
But i want all this to work with the firewall installed

Can someone tell what rule should be configured (No allow all)

< Message edited by Kumaraseem -- 24.Feb.2006 1:19:10 PM >

(in reply to Kumaraseem)

Post #: 4

RE: DHCP requests not going to DHCP server - 6.Mar.2006 7:17:40 PM

Faheem

Posts: 43
Joined: 23.May2004
From: pakistan
Status: offline

hi to all, dear, kumaraseem, i want to ask, that how can i configure, dhcp client and server for, isa server 2k4, i want to run net and everty thing on one particular ip as dhcp client, plz help me out

(in reply to Kumaraseem)

Post #: 5

RE: DHCP requests not going to DHCP server - 6.Mar.2006 11:45:45 PM

elmajdal

Posts: 6022
Joined: 16.Sep.2004
From: Lebanese in Kuwait
Status: offline

quote:

ORIGINAL: Kumaraseem
If i put the rule to allow all protocols from internal to localhost then this will reduce the security, I dont think this to be a good practice.
And i have put in DHCP request & Reply allow rule in the list

One question , Installing ISA on a DC is not a security issue ??

have u read about the big mistake of installing ISA on a DC.

_____________________________

Tarek Majdalani

Windows Expert - IT Pro MVP
Facebook : https://www.facebook.com/ElMajdal.Net

(in reply to Kumaraseem)

Post #: 6